Overview

overview

10

Static

static

3

Hispavox.exe

windows7-x64

7

Hispavox.exe

windows10-2004-x64

10

Resubmissions

14-11-2023 22:12

231114-14nmwagb55 10

14-11-2023 22:09

231114-12934ahe3x 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Hispavox.exe

  • Size

    13.7MB

  • Sample

    231114-14nmwagb55

  • MD5

    1c66b1b3b38b95648efe848c8b0959ca

  • SHA1

    68d245a68b5c5a92c39e13d4bfa8d9b5505f21fd

  • SHA256

    508b4f0404f6a969f8444c5287d532b0fb180e7853b67ddb86f3803f19453d92

  • SHA512

    e8f69d3ab4fc657ea1786afd51e87c4b7b00dccfbe4465698180502bb608f863dff15886d74aa0677b09c1177c4eb22728cc1a5782927ba0cd207d7876b6d8c4

  • SSDEEP

    49152:BTmuEoPcYAfq04PAZysr9AXB37eGIK6Wy/tD78X3JfF0u3zCypYluZs9l0rUKlvY:BTzmq0+8

Score
10/10
bandookrattrojanupx

Malware Config

Targets

    • Target

      Hispavox.exe

    • Size

      13.7MB

    • MD5

      1c66b1b3b38b95648efe848c8b0959ca

    • SHA1

      68d245a68b5c5a92c39e13d4bfa8d9b5505f21fd

    • SHA256

      508b4f0404f6a969f8444c5287d532b0fb180e7853b67ddb86f3803f19453d92

    • SHA512

      e8f69d3ab4fc657ea1786afd51e87c4b7b00dccfbe4465698180502bb608f863dff15886d74aa0677b09c1177c4eb22728cc1a5782927ba0cd207d7876b6d8c4

    • SSDEEP

      49152:BTmuEoPcYAfq04PAZysr9AXB37eGIK6Wy/tD78X3JfF0u3zCypYluZs9l0rUKlvY:BTzmq0+8

    Score
    10/10
    upxbandookrattrojan

    • Bandook RAT

      Bandook is a remote access tool written in C++ and shipped with a loader written in Delphi.

      rattrojanbandook

    • Bandook payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks